818062 - Android test FAILED: test opening the database r/w in a readonly directory

Status: RESOLVED WORKSFORME

(NSS :: Test, defect)

Description

[Kai Engert [:KaiE:]]

---------------------------------------------------------------
| test opening the database r/w in a readonly directory
---------------------------------------------------------------
dbdir selected is /data/data/berserker.android.apps.sshdroid/home/nsstest/tests_results/security/localhost.1/ronlydir

database checked is /data/data/berserker.android.apps.sshdroid/home/nsstest/tests_results/security/localhost.1/ronlydir/secmod.db
database checked is /data/data/berserker.android.apps.sshdroid/home/nsstest/tests_results/security/localhost.1/ronlydir/cert8.db
database checked is /data/data/berserker.android.apps.sshdroid/home/nsstest/tests_results/security/localhost.1/ronlydir/key3.db
dbtests.sh: #625: Dbtest r/w succeeded in an readonly directory 0 - FAILED
certutil: could not find certificate named "TestUser": security library: bad database.



---------------------------------------------------------------
| test opening the database r/w in a readonly directory
---------------------------------------------------------------
dbdir selected is /data/data/berserker.android.apps.sshdroid/home/nsstest/tests_results/security/localhost.1/sharedb/ronlydir

database checked is /data/data/berserker.android.apps.sshdroid/home/nsstest/tests_results/security/localhost.1/sharedb/ronlydir/secmod.db
ERROR: File "/data/data/berserker.android.apps.sshdroid/home/nsstest/tests_results/security/localhost.1/sharedb/ronlydir/secmod.db" does not exist.
database checked is /data/data/berserker.android.apps.sshdroid/home/nsstest/tests_results/security/localhost.1/sharedb/ronlydir/cert8.db
ERROR: File "/data/data/berserker.android.apps.sshdroid/home/nsstest/tests_results/security/localhost.1/sharedb/ronlydir/cert8.db" does not exist.
database checked is /data/data/berserker.android.apps.sshdroid/home/nsstest/tests_results/security/localhost.1/sharedb/ronlydir/key3.db
ERROR: File "/data/data/berserker.android.apps.sshdroid/home/nsstest/tests_results/security/localhost.1/sharedb/ronlydir/key3.db" does not exist.
dbtests.sh: #7265: Dbtest r/w succeeded in an readonly directory 0 - FAILED
certutil: could not find certificate named "TestUser": Unrecognized Object Identifier.


SUMMARY:
========
NSS variables:
--------------
HOST=localhost
DOMSUF=
BUILD_OPT=
USE_64=
NSS_CYCLES="standard pkix upgradedb sharedb"
NSS_TESTS="cipher lowhash libpkix cert dbtests tools sdr crmf smime ssl ocsp merge pkits chains"
NSS_SSL_TESTS="crl normal_normal iopr"
NSS_SSL_RUN="cov auth stress"
NSS_AIA_PATH=
NSS_AIA_HTTP=
NSS_AIA_OCSP=
IOPR_HOSTADDR_LIST=
PKITS_DATA=/data/data/berserker.android.apps.sshdroid/home/pkits/

Tests summary:
--------------
Passed:             9159
Failed:             2
Failed with core:   0
Unknown status:     0

Comment 1

[Kai Engert [:KaiE:]]

/data/data/berserker.android.apps.sshdroid/home/nsstest/tests_results/security/localhost.1 # ls -ld ronlydir
drwsrwsrwt    2 root     root          4096 Dec  4 15:29 ronlydir

/data/data/berserker.android.apps.sshdroid/home/nsstest/tests_results/security/localhost.1 # ls -l ronlydir/
total 401
-r--------    1 root     root           578 Dec  4 15:29 TestUser-ec.cert
-r--------    1 root     root           576 Dec  4 15:29 TestUser-ecmixed.cert
-r--------    1 root     root           609 Dec  4 15:29 TestUser.cert
-r--------    1 root     root        131072 Dec  4 15:29 cert8.db
-r--------    1 root     root         40960 Dec  4 15:29 key3.db
-r--------    1 root     root           393 Dec  4 15:29 req
-r--------    1 root     root         16384 Dec  4 15:29 secmod.db

Maybe the test is failing because I have root permissions on the phone.

Comment 2

[Kai Engert [:KaiE:]]

We could execute "chmod ug-s" on the directory.

Could we simply always execute that command on the directory for this test?

Comment 3

[Kai Engert [:KaiE:]]

Attachment: Patch v1

toughts?

Comment 4

[Kai Engert [:KaiE:]]

Comment on attachment 688450 [details] [diff] [review]
Patch v1

patch does't help

Comment 5

[Kai Engert [:KaiE:]]

I will attempt to work around this problem by denying root access to the sshdroid app.

Comment 6

[Kai Engert [:KaiE:]]

(In reply to Kai Engert (:kaie) from comment #5)
> I will attempt to work around this problem by denying root access to the
> sshdroid app.

Yes, that worked! Closing.